Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
File:                     FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json)
Hash identifier:          5XEq0p4TnDRk1wdqPBwnU2XL1DJqZt7m0eCdIzDlii0=
Subject key identifier:   F3:01:5D:BE:54:5D:F5:BE:57:BC:06:56:24:53:11:04:39:A0:0F:67
Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Certificate issuer:       /CN=153d757b77067befd9446694748ad2b04e97b38c
Certificate serial:       019CABD9EF28814A70DBD1D5CDDDADD251C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 00:01:52 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:52 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:52 +0000
Files and hashes:         1: 2_PmjSq2ymAnVudAlocm7T1tmn4.roa (hash: QSuT7TExW9U0JzR64tb3XYLCTidPjZYgevzpEmIents=)
                          2: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: ESRCTQh/FhnRUBnCG9o2DjWMEINXKjox9Zm1B6tnpuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:ef:28:81:4a:70:db:d1:d5:cd:dd:ad:d2:51:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c
        Validity
            Not Before: Mar  2 00:01:52 2026 GMT
            Not After : Mar  3 00:01:52 2026 GMT
        Subject: CN=f3015dbe545df5be57bc06562453110439a00f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f9:95:74:37:6d:45:4b:49:24:35:47:06:1f:
                    9b:e8:3b:40:73:be:d6:56:09:f7:4a:fd:af:e5:40:
                    36:b5:99:5c:00:d9:f1:8c:00:be:81:9b:1c:67:81:
                    d5:7a:df:57:e9:51:a4:ab:52:a0:10:b4:ac:85:4b:
                    39:f4:fe:50:06:ab:c2:e8:d8:a8:ef:b9:aa:54:ac:
                    09:c3:0a:df:76:cd:c4:c8:8e:e5:07:c5:a1:86:14:
                    c4:cf:5d:82:15:32:65:80:5f:b0:04:76:f0:f3:90:
                    ed:62:7a:42:ed:3a:89:a5:ca:44:1d:da:a6:ff:70:
                    98:23:3b:ce:9a:c0:36:16:7f:62:bf:6f:a7:57:66:
                    83:1c:f7:d6:c7:fc:1e:c8:f6:1e:a7:32:09:33:31:
                    ee:71:8e:21:c7:13:30:38:b2:4e:e4:32:be:8b:c4:
                    41:ca:b8:0c:e2:ff:80:f3:ea:26:e3:2b:d3:fb:68:
                    5a:4e:1e:ca:4e:f4:a0:1c:c9:45:9a:61:10:5f:32:
                    6a:3f:da:35:5d:cd:fb:cc:57:13:58:23:8a:29:02:
                    f8:4f:d7:3b:af:9b:0d:78:a0:45:1d:8c:9e:c2:c2:
                    39:b5:68:9d:ac:14:c2:e8:97:bd:1c:e1:84:05:8a:
                    23:35:5a:40:ea:ca:f8:34:35:6b:17:10:5f:e9:ba:
                    cb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:01:5D:BE:54:5D:F5:BE:57:BC:06:56:24:53:11:04:39:A0:0F:67
            X509v3 Authority Key Identifier:
                keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:79:5e:f6:97:71:fb:10:4c:80:91:98:98:24:7a:10:99:65:
         16:ab:94:49:0a:d5:4a:49:0f:cb:72:a9:21:cc:77:09:d3:12:
         05:7e:da:93:75:ee:6f:e6:5f:4e:c8:ee:02:55:6b:2b:dd:e5:
         17:45:06:47:8e:cf:67:2c:ea:3b:d0:e1:4c:97:49:1f:25:4c:
         60:1b:9f:02:54:69:70:02:15:a9:90:75:5e:0f:38:8b:4d:bd:
         58:a3:39:46:64:11:07:69:48:0a:55:9a:16:aa:64:f8:08:fe:
         4b:cf:15:49:0b:ca:e0:2d:0f:9d:30:9f:12:03:63:c4:d1:79:
         a1:2a:7f:8a:2e:89:58:6a:3f:87:03:7b:f6:76:18:cb:e2:78:
         bb:96:ba:86:8c:2f:06:8f:bc:5b:31:81:cd:5f:7e:85:f5:98:
         ef:f0:32:c4:0c:93:3c:c3:13:86:4c:39:91:65:cf:21:bf:a5:
         57:5e:00:2b:56:4a:ce:04:41:2c:f7:b2:08:18:70:0a:2c:b9:
         31:88:16:a0:95:d0:ec:7c:62:75:8e:29:70:b3:81:e8:d6:36:
         3e:06:1f:63:08:2c:8c:8b:c2:f1:e4:25:d5:54:8f:33:fa:ce:
         7e:07:1c:58:38:2f:d2:6d:c7:18:e2:58:00:f2:86:8f:ba:26:
         0d:cc:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:06:30 2026 by rpki-client